2024

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible function

Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authoriza

Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identif

SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive inf

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formS

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48. Affected by this issue is

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not valida

Cross-Site Request Forgery (CSRF) vulnerability in Optimole Super Page Cache for Cloudflare allows Stored XSS.This issue

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy:

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Florian 'fkrauthan

Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafte

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX app

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooC

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in typps Calendarista

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/index/getdepartments/format/

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'descrip

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/expenses/expensecategories/e

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbindi

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with t

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymou

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wr

The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users

A vulnerability classified as critical was found in Panabit Panalog 202103080942. This vulnerability affects unknown cod

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c f

Wasmi is an efficient and lightweight WebAssembly interpreter with a focus on constrained and embedded systems. In the W

The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vul

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use o

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In version 1.39.0, use of raw file descriptors in `op_node_ip

Grav is a content management system (CMS). Prior to version 1.7.43, users who may write a page may use the `frontmatter`

Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, a

Minder is a software supply chain security platform. Prior to version 0.0.33, a Minder user can use the endpoints `GetRe

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain

Frappe is a full-stack web application framework. Prior to versions 14.66.3 and 15.16.0, file permission can be bypassed

Frappe is a full-stack web application framework. Prior to versions 14.64.0 and 15.0.0, SQL injection from a particular

An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languag

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensiti

A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files

Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and

IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.